$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft File: 1A5D93C2B21C390D054872B547EF671BC1112ED5.mft (raw, json) Hash identifier: qU1MICloEBGy4r94agNDoFSBPmxwtNso/1rhGn8LFys= Subject key identifier: CE:9C:60:7C:7F:17:37:45:4F:A4:54:D8:7D:D0:4E:91:49:4E:E1:4F Authority key identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 Certificate issuer: /CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Certificate serial: 7C5B071EFDFD8128C28C509688ECAA66B3295DE6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft Manifest number: 0139 Signing time: Wed 07 Oct 2026 11:26:08 +0000 Manifest this update: Wed 07 Oct 2026 11:21:08 +0000 Manifest next update: Sat 10 Oct 2026 12:19:08 +0000 Files and hashes: 1: 3130332e34372e38302e302f32322d3232203d3e20313334373635.roa (hash: kU8ZpTrXY6JeDmKQWJ4S005IDbAoloAT2cFKH9NDoa4=) 2: 1A5D93C2B21C390D054872B547EF671BC1112ED5.crl (hash: D4yhkrIZxvPue518/uAqkTQwx3aL5O5vTpVzVnbwN7A=) 3: 34332e3235342e3235322e302f32322d3232203d3e20313334373635.roa (hash: YBGoT8mUzeyt/JC8Sh5jlyNBlqC5ecvmhtvHHC0j9gM=) 4: 3130332e32332e382e302f32322d3232203d3e20313334373635.roa (hash: ln972wvrzSBEORo9DPPeJbIXLsmgp1iIG1BgLmdr5+g=) 5: 34332e3232382e37362e302f32322d3232203d3e20313334373635.roa (hash: 0QQ3acV5OGPw111O9u72jjimK1i0jbUIJPcTkw6FNnE=) 6: 3130332e3230332e3134302e302f32322d3232203d3e20313334373635.roa (hash: ZjwDDfmeHi1TdKdCeuuvzyOYx2ipxq03Vh0SPR2jC34=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 12:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:5b:07:1e:fd:fd:81:28:c2:8c:50:96:88:ec:aa:66:b3:29:5d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Validity Not Before: Oct 7 11:21:08 2026 GMT Not After : Oct 10 12:19:08 2026 GMT Subject: CN=CE9C607C7F1737454FA454D87DD04E91494EE14F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:41:10:49:4a:c6:38:65:eb:dc:5c:b2:2b:37: e8:6f:0b:3a:48:c1:6b:c5:b0:94:b1:60:78:6f:5d: b5:0e:33:b5:80:2c:0a:fa:87:87:2a:4d:47:fb:e2: 7f:a2:5d:7e:c4:89:35:95:6d:7b:14:f4:67:19:e6: 7c:23:37:2e:87:b8:81:6c:c5:73:c5:c6:ac:e4:dd: 3d:f9:b3:66:9f:72:f4:24:87:56:7c:5a:1b:6f:2c: 47:1d:b2:33:3f:69:01:6b:0b:ae:81:2c:b6:db:f9: 04:a8:ba:0e:87:7c:0d:01:2d:18:84:d5:74:f2:9c: a2:b4:f8:52:e0:3f:28:43:38:77:42:2c:5d:60:9a: 1e:76:cb:5f:96:9a:9f:8c:dc:d0:14:66:64:f9:10: e8:12:59:11:78:16:cc:c4:26:c0:29:87:b8:a3:6d: db:c7:7b:62:10:f2:70:65:97:6e:aa:b8:a8:a8:91: 68:09:19:01:4d:4c:21:99:08:2d:7c:d7:b6:15:9b: 7f:18:f1:42:2d:70:bf:39:df:be:af:38:c4:e1:44: 1c:e0:03:75:23:20:7c:38:df:07:41:42:13:d9:45: a6:8b:dd:0f:44:d9:29:13:8e:50:75:a6:02:04:f6: 3d:84:ae:a5:e0:22:02:21:7c:55:31:98:31:89:4f: 79:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9C:60:7C:7F:17:37:45:4F:A4:54:D8:7D:D0:4E:91:49:4E:E1:4F X509v3 Authority Key Identifier: keyid:1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:0e:5b:7f:6a:ad:27:b7:58:66:04:2f:f3:ec:09:da:aa:c7: 5c:90:80:2e:24:54:c2:33:be:45:34:3f:38:46:d6:28:59:b7: 8f:a8:ba:07:4b:a2:60:7c:9f:6d:6b:b5:08:60:93:ee:f6:8c: 89:cc:36:c9:28:a7:1e:32:ff:25:22:28:59:c4:e4:72:e6:92: 04:0a:80:50:fd:99:70:31:5d:10:4c:8d:49:91:49:10:57:6f: e9:36:83:6a:51:c3:28:1c:7d:0c:0f:00:87:9f:1d:2a:a4:ae: 72:fb:57:4a:7a:3b:d8:7e:45:ef:22:91:29:f4:33:a2:ab:e6: 36:32:5e:40:b6:2b:4d:00:11:70:85:41:a4:de:8b:bd:d0:ff: db:82:7e:37:e8:37:1d:eb:7f:03:01:0d:27:af:f0:98:ca:d7: 92:c8:2c:3e:3b:07:9e:ac:88:a4:28:f6:fb:2b:50:d3:77:88: 13:d9:f1:b6:8f:5a:0c:af:72:34:2d:8b:32:5c:93:15:eb:f9: f7:f5:e8:cc:2a:6d:28:94:dc:c4:ac:ee:6c:da:7d:dc:f9:15: 6d:99:13:93:b7:31:c8:59:c2:ae:8f:af:7f:1b:3e:4d:8d:ce: 85:bf:91:fb:ee:c7:1c:6c:b7:78:72:e0:e4:02:bc:9b:da:27: 94:88:62:3b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfFsHHv39gSjCjFCWiOyqZrMpXeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJD MTExMkVENTAeFw0yNjEwMDcxMTIxMDhaFw0yNjEwMTAxMjE5MDhaMDMxMTAvBgNV BAMTKENFOUM2MDdDN0YxNzM3NDU0RkE0NTREODdERDA0RTkxNDk0RUUxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZQRBJSsY4ZevcXLIrN+hvCzpI wWvFsJSxYHhvXbUOM7WALAr6h4cqTUf74n+iXX7EiTWVbXsU9GcZ5nwjNy6HuIFs xXPFxqzk3T35s2afcvQkh1Z8WhtvLEcdsjM/aQFrC66BLLbb+QSoug6HfA0BLRiE 1XTynKK0+FLgPyhDOHdCLF1gmh52y1+Wmp+M3NAUZmT5EOgSWRF4FszEJsAph7ij bdvHe2IQ8nBll26quKiokWgJGQFNTCGZCC1817YVm38Y8UItcL85376vOMThRBzg A3UjIHw43wdBQhPZRaaL3Q9E2SkTjlB1pgIE9j2ErqXgIgIhfFUxmDGJT3mhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzpxgfH8XN0VPpFTYfdBOkUlO4U8wHwYDVR0j BBgwFoAUGl2TwrIcOQ0FSHK1R+9nG8ERLtUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODM1MzUzOC8wLzFBNUQ5M0MyQjIxQzM5MEQwNTQ4NzJCNTQ3RUY2 NzFCQzExMTJFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJDMTExMkVENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgzNTM1MzgvMC8xQTVEOTNDMkIyMUMz OTBEMDU0ODcyQjU0N0VGNjcxQkMxMTEyRUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYA5bf2qtJ7dY ZgQv8+wJ2qrHXJCALiRUwjO+RTQ/OEbWKFm3j6i6B0uiYHyfbWu1CGCT7vaMicw2 ySinHjL/JSIoWcTkcuaSBAqAUP2ZcDFdEEyNSZFJEFdv6TaDalHDKBx9DA8Ah58d KqSucvtXSno72H5F7yKRKfQzoqvmNjJeQLYrTQARcIVBpN6LvdD/24J+N+g3Het/ AwENJ6/wmMrXksgsPjsHnqyIpCj2+ytQ03eIE9nxto9aDK9yNC2LMlyTFev59/Xo zCptKJTcxKzubNp93PkVbZkTk7cxyFnCro+vfxs+TY3Ohb+R++7HHGy3eHLg5AK8 m9onlIhiOw== -----END CERTIFICATE-----Generated at Thu Oct 8 13:49:02 2026 by rpki-client